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(54) Method nnd apparatus for identify mg and discarding junk electronic mail 



(57) App^ifHius methods, systems and computer 
program prodjcis aro disclosed to provide electronic 
mail sy steins *iih the capability tor a group of trusted 
users tocoHoc'.rvcly determine whether a given electron- 
ic mail mos<;Hfio is funk e-mail Further, if the given elec- 



tronic mail message is determined to be junk mail, the 
e-mail systems of other trusted users in the group dis- 
pose of unviewed copies of the junk e-mail. Thus, the 
invention reduces the exposure of junk e-mail messag- 
. es to the group of tajsted users. 
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Description 

This Invention relates to the field of Electronic Mail Management Systems: Specifically, this Invention is a newand 
useful method, apparatus and computer program product for ignoring junk electronic mail (e-mail) messages. . 
Electronic mall provides a quick and convenient way for computer users to communicate. A message originator 
. initiates this communication by composing a message using a text editing program, providing the e-mail addre^ of 
the intended recipient, and often by providing an Indication of the content (subject nratter) of the message by including 
text In a -subiecf field Then, using v^ell-understood technology, the originator's mail system sends the message to 
the recipient's computer address. The recipient's computer receives the message and stores It in the recipient's inbat.. . 
0 The recipient eventually reads, deletes, responds to. or othervi/lse processes the message stored within the mbox by 
using any of a number ot e-mail programs well known in the art. . \. ~ w , 

Because these messages travel across networks, they generally are constmcted according to the Standard for 
the Format otARPA Internet Text Messages specification (RFC822). This specification can be found on the world wide, 
web of the Internet at address ■http://www.cls.ohio-state.edu^tbin/rfc/rfc822.htmr. Messages formatted to the RFC822 
5 si,indard have a header portion and an optional body portion that contains the text of the message. The header portion 
.f^iudos a number of fields that address and classify the message. The invention does not require the use of the 
HI-CC22 standard. So long as there exists a method to Identify essential Information the invention is applicable. How- 
ever the embodirhent described herein uses the RFCe22 protocol. _ 
The header portion ot a message contains fleWs composed ot character strings comprising a fiekJ-name followed 

:o t)\ a 'okjn followed by a field-body terminated by a carriage return/line feed. An example header fieU is: . . 

•To John Doe<CR><LF>". In this example, the <CR> represents the ASCII carriage return character and the 
VLF, represents the ASCII line feed character. The header field-names are not case sensitive, thus, to:" is equivalent 

'° ^Tho alginatorl^o composes the message, specifies the contents of many header fields. The "To-field contains 
ihc .uld,csscs of the intended primary recipients of the message where the address of each recipient is separated by 
comma The ■Co " field contains the addresses of the intended secondary recipients of the message (again each 
address IS separated by a comma)'. The -Subject:- field often provides a summary, or indicates the nature, of , the 
mossaqo Although the originator initlallzes all these f ieWs as desired, the contents of the recipient fieUs are generally 
,mm,f^ lo be actual Intemet addresses. On the other hand, the Subject: fieW has no specific meaning and may in 
30 u-j 00 blank or contain a random arrangement of characters. Generally, the Subject: field generally contains a short 
III croprcsenlative of the message's subject matter. ,„ ^ -ru r u 

The mail system also adds header fields to the message. One of these fields is the Message-ID: fteU. The field- 
body ol Ihis field contains a unique machine readable identifier that uniquely identifies each message. 

An originator can address a single message to many recipients by separating the addresses of the recipients with 
35 a comma Each ol these recipients may respond to the original message by sending a reply message to the same list 
ol recipients (plus the originator). Some of these recipients may then respond to the first reply message. These reply 
messages are termed lollow-up messages lo the original message. This process facilitates a vigorous discussion 
botwoon the originator and the recipients, as well as between the recipients. 

As mentioned above, most Electronk; Mall programs provide a mechanism so that the recipient can reply to a 
40 message. This mechanism generally allows the reply to be sent to the original originator, or to be sent to all of the 
original recipients in addition to the originator. These e-mail programs use the same -Subject:- fiekJ-body text as the 
original message but generally prepend an Indicator to the fieW-text portion of the subject header to indicate that the 
reply message relates to the subject matter of the original message. That Is, that the reply message is continuing the 
discussion initiated by the original message. The moditicatton to the subject field is generally made by P/epending one 
45 of the following strings to the subject field-body text: -Re:", -RE:', "re:-, -ReN:". -reN:". "REN:'. RelNj:-. re[Nl: . or RE 
fNl -(v*ere "N" is an integer). Thus, the recipients of the reply to the original message can determine that the reply is 
directed to an ongoing discussion and not initiating a new discussion. Hence, a discussion evolves between, the recip- 
ients relating lo the subject matter ol.the original message. 

This process has expanded Into the distribution list concept. A distribution list Is generally directed towards a 
so . particular subject matter (for example, the copyright list ■cni<opyright®cnl.org-). Thus, those who are interested in 
the subject matter "subscribe-to thedistrlbutlon list. Subscribers have their e-mail address added to the list of recipients 
for messages sent from the distribution list. Thus.. when the distribution list receives a message it redistnbutes the 
. mossago using normal e-mail, toall the subscnbers (recipients) of the distribution list. Distribution lists can be managed 
directly by some human agency, a program (a listsen/er). or acombination of both. Some distribution lists are moderated 
In the sense that a human reviews all incoming messages prior to reposting them through the distnbution list, aher 
distribution lists are not moderated. Thus, messages received by the unmoderated group are automatically redistnbuted 
to the rest of the subscribers without human review. . . ,, • 

With e-mail discussions, particularly with unmoderated discussion lists, a recipient often loses interest in foltowing 
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a discussion about any given subject matter. When that recipient would rather not read the message it becomes elec- 
tronic \unk mail - a waste of time to open, read, and discard. Because it takes the recipient's time to discard these 
messages, they rapidly accumulate and soon dominate the recipient's inbox. Another source o1 junk e-mail is from 
people who send messages to a large number of recipients most of whom have no interest in the message. Yet another 

s source of junk e-mail is from people who spam the net. Spamming occurs when someone sends a message to several 
distribution lists dedicated to topics that are unrelated or only marginajly related to the content of the spamming mes- 
sage. Recipients may even receive multiple copies of the spamming message from different distribution lists. Spam 
has been described as 'an obnoxious, netwide epidemic" and has even engendered a lawsuit by an annoyed recipient 
(see ■http://techweb.cmp.com/net/issues/036issue/0361aw.htm'). Still another source of junk mail results from recip- 

10 ients of distribution list messages who mistakenly send subscribe and unsubscrbe messages directly to the distribution 
list instead of to the listserver sending the distrtoution list. This results in the subscribe and unsubscribe messages 
being redistributed to the recipients of the distribution list instead of being processed by the listserver, 

Everyone desires to be rid of junk e-mail, but not everyone agrees on what junk e-mail is. A facility that removes 
junk e-mail is subject to being abused by those who desire to censor e-mail or desire to nnaliciously delete e-n^ail 

15 . addressed to another. One prior art method used to limit the transmission of junk e-mail is to use a moderated distribution 
list as described above. However, this approach delays the distribution of e-mail because a human moderator must 
review each message before the message is distributed to the list. Further, the moderator has the sole discretion to 
decide which messages are distr^Dijted. Thus, discussions on topics disagreeable to the moderator are difficult because 
the moderator riiay censor the discussion and thereby limit the effectiveness of the discussion group. Finally, spammers 

20 may simply send spam messages to a multiple set of individual e-mail addresses instead of sending these messages 
through distribution lists. 

. The prior art partially addresses this problem by enabling the creatbn of recipient modifiable "filters' that ignore 
e-mail messages that the recipient does not desire to view. These filters examine each message for some condition. 
If the filter detects that condition in the message, the filter performs an operatiori on that message. These f ijter operations 

25 generally include a delete operation. Thus, uninteresting messages can be removed from incoming e-mail without 
. intervention by the recipient. However, messages that have already been stored in the recipient's inbox are generally 
not accessible to a filter. Thus, most fitters will not remove unread messages in the recipient's inbox. Further, even 
those filters that can remove messages from the recipient's inbox require the recipient to execute some additional 
command to do so. /Another problem with filters is that they are notoriously difficult for non-programmers to use and 

30 often require significant debugging. Additionally, at some later date the recipient must remember.to deactivate the filter 
to be able to read future interesting discussions that nevertheless satisfy the conditions being filtered. Finally, one 
problem with the filter approach to removing junk e-mail is that junk e-mail usually does not have a consistent charac- 
teristic that the filter can detect. This means that the recipient must constantly create new narrowly tailored filters 
specialized for each type of junk e-mail message. However, even with narrowly tailored filters some messages that 

35 the recipient would not consider to be junk e-mail may fall wnthin the parameters of the filter and be deleted. 

The invention addresses these problems and simplifies a recipient's use of e-mail by providing a mechanism for 
identifying and automatically deleting most junk e-nnail messages without the disadvantages and problems of the prior 
art solutions. 

The present invention overcomes the disadvantages of the above described systems and provides an economical, 
40 apparatus, method, system and computer program product for providing enhanced facilities to users of electronic mail 
systems. One aspect of the invention is a computer controlled method for processing electronic mail. The method 
presents an e-mail message to a trusted recipient who classifies the e-nnail message. |f the tnJsted recipient classifies 
the e-mail message as being junk e-mail, the method prevents the presentation of the junk e-mail to other trusted users 
who have not yet viewed the junk, e-mail. 
45 In another aspect of the invention, an electronic mail system is disclosed using a central processing unit (CPU), 

a memory, and a filestorage mechanism to provide a presentation mechanism that presents an electronic mail message 
to a trusted recipient belonging to a group of trusted recipients. This aspect of the invention also provides a classification 
mechanism that allows the trusted recipient to classify the e-mail message. Further, this aspect of the invention dis- 
closes a presentation prevention mechanism that operates to prevent the e-mail message from being presented to , 
so one or more trusted recipients. 

In yet another aspect of the invention an electronic mail apparatus is-disclosed using a central processing unit 
(CPU), a memory, and a filestorage mechanisni for preventing the presentation of ari e-mail message to one or more 
trusted recipients. 

Another aspect of the invention is a computer program product having computer readable code embodied in a . 
5S computer usable storage medium. This code, when executed on a computer, processes electronic mail messages and 
causes the computer to effect a presentation prevention mechanism that prevents presentation of an e-mail message 
to one or more trusted recipients. . 

Another aspect of the invention is a trusted group server apparatus that uses a central processing unit (CPU), a 
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memory and a f ilestorage mechanism. This apparatus includes a notification reception mechanism that receives junK 
mail report messages and a warning mechanism that sends junk mail warning messages to the trusted recipients 
served by Ihe trusted group server apparatus. ' u«4-^- 

Ycl a final aspect of the invention is a computer program product having computer readable code embodied tn a 
5 computer usable storage medium. This code, when executed on a computer, causes a computer to provide services 
lo H trusted recipient These code devices are configured cause a computer to receive junk mail report messages and 
to send iunk mail warning messages lo a trusted group recipient. . . , „ • 

The objects, features and advantages of the system of the present invention will be apparent from the following 
dcscMpiion in which: ; 

10 

Figure 1 illustrates a portion of a computer, including a CPU and a conventional memory in which the present 

invention may be embodied; 

Figure 2 illustrates the overall staicture of an electronic mail system; 

Figure 3 : is an oven/iew of the operation of the invention in accordance with a preferred embodiment; 

Figures 4a4b illuslraie user displays presented by an application program configured in accordance with a pre- 
fcrrcd embodiment; 

Figure 5 iilobti ales the data structures used to maintain Trusted Group Member information in accordance 

with a preferred embodiment; 

Figure 6 illustrates the data structures used to maintain junk e-mail characteristics of in accordance with a 

2S preferred embodiment; 

Figure* 7i8 illustrate the processes used to clean the junk e-mail databases in accordance with a preferred 
embodiment; 

30 Figure 9 illustrates the procedure used to compare the characteristbs of e-mail messages in accordance 

with a preferred embodiment; 

Figure 1 0 . illustrates the process used to process an e-mail message that is classified as a junk e-mail message 
by a user in accordance wrth a preferred embodiment; 



35 



Figures lla&b illustrate the process used by a Trusted Group Sen/er to process junk e-mail report messages in 
accordance with a preferred embodiment; and 

Figures 1 2a&b illustrate the process used by a trusted user's mail system to detect and discard junk e^ail mes- 
40 . sages in accordance with a preferred embodiment 

Notations and rtomenclature 

DIstribulion list - An e-mail recipient that receives e-mail and forwards that e-mail to subscribers to the distribution 
45 list. A computer application called a listserver often manages a distribution list A distribution list is often termed a 

mailing list. . • \. , ♦u ♦ 

E-mail system • An electronic mail system being a system o1 computers generally connected by a network that 
allow an or iginHior (being a user of a first computer) to compose and send data making up a message to a recipient 
(being a usei of eithei the first computer or of a second computer). 
so Graphical User Interface (QUI) - A user interface that allows a user to interact with a computer display by pointing 

at selectable control areas on the display and activating a command or computer operation associated with the se- 
lectable control area. GUIs are well known in the art. 

Inbox - an area on a filestorage used by an e-mail system to store e-mail messages that have not been viewed 

by a recipient ^ ^ » 

£5 Originator - A computer user or computer application program that composes an e-mail message and presents 

the message lo the computer's e-mail system for transmission to one or more recipients. 

Pane - An area in a window where an application may draw graphics (i.e.. text, pictures, mpvies. etc.). 

Pointing device - A device that is responsive to a computer user's input that moves an indicator on a computer 
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display screen. Such an indicator has an active point such that if the pointing device is activated (for example, by a 
button push for a mouse device) a command aissociated with the selectable control area covered by the active point 
is invoked. Graphical User Interfaces generally use pointing devices. 

Recipient • A computer user or computer application program having an e-mail address where an originator can 
5 send an e-mail message. , 

Text String - Ordered computer data in a computer that represents text. One common representation of a text 
string is a sequence of eight bit bytes each containing an ASCII representation of a character. Such a sequence is 
often terminated by a byte yvhose value. is zero or by having a leading value indicate the length of the string. One skilled 
in the art will understand that there exist many methods for storing text strings beyond the ones mentioned here. 
; 10 Spamming - The act of sending an e-mail message to multiple distribution lists in such a way that the message 

does not fit into the distribution lists' particular subject matter or posting the same or nearly identical message too many 
times to the same distribution list or set o1 recipients. 

Selectable control area - An area on a computer display that is sensitive to activation of a pointing device. Acti- 
vation of the pointing device over the selectable control area invokes a command or computer operation associated 
IS with the selectable control area. Most computer systems that provide a Graphical User Interface (GUI) also provide 
other methods for invoking these commands or computer operatbns such as keyboard functbn keys or command fines, 
j; . User - A human who uses a computer. 

Window - an area, usually rectangular, on a computer display screen controlled by an application. 
A procedure is a self -consistent sequence of steps leading to a desired result. These steps are those requiring 
20 physical manipulation of physical quantities. Usually these quantities lake the form of electrical or magnetic signals 
capable of being stored, transferred, combined, compared, and otherwise manipulated. These signals are referred to 
as bits, values, elements, symbols characters, terms, numbers, or the like. 11 will be understood by those skilled in the 
art that all of these and similar terms are associated with the appropriate physical quantities and are merely conven lent 
Ji; labels applied to these quantities, 

25 The manipulations performed by a computer in executing opcodes are often referred to in terms, such as adding 

v or comparing, that are commonly associated with mental operations performed by a human operator. No such capability 

of a human operator is necessary in any of the operations described herein that form part of the present invention; the 
ope rations are machine operations. Useful mach ines for perfomning the ope rations of the invention include programmed 
general purpose digital computers or similar devices. In all cases the method of computation is distinguished from the 
30 method of operation in operating a computer. The present invention relates to method steps for ope rating a computer 
iri processing electrical or other (e.g., mechanical, chemical) physical signals to generate other desired physical signals. 
The invention also. relates to apparatus for performing these operations. This apparatus may be specially con- 
structed for the required purposes or it may comprise a general purpose computer as selectively activated or recon- 
figured by a computer program stored in the memory of a computer. The procedures presented herein are not inherently 
{ 3S . related to a particular computer or other apparatus. In particular, various general purpose machines may be used with 
programs written in accordance with the teachings herein, or it may prove moire convenient to construct more special- 
ized apparatus to perform the required method steps. The required structure for a variety of these machines will appear 
J from the description below. 

Finally, the invention may be embodied in a computer readable storage medium encoded with an e-mail. application 
40 program. 

Description of the Preferred Embodiments 

J Overview 

- 45 ■ . . . ■ ' ; ■ 

J The iriventibri allows a subset of the members of a trusted group of recipients to determine which e-mail messages 

fi. . should be considered to be junk e-mail for the rest of the members of the trusted group. A trusted group of recipients 

is composed of those who have some common approach or interest An example of a trusted group is one made up 
t of company empbyees. Another example is the group of professionals who subscribe to a distribution list of interest 

so to their profession. Once an e-mail message is displayed to some number of trusted recipients and a sufficient number 

of those recipients classify that message as junk.e-mail, other trusted recipients who have not yet viewed the offending 
^; e-mail message are saved the annoyance of viewing the message because it is automatically removed from their mail 

system. Thus, the trusted group, as a whole, is benefited by the actions of the first recipients who view and classify 
5 . the message as junk e-mail, 

I £5 • ■ ■ ■ • ■ 

Operating Environment 

I Some of the elements of a computer system 102 configured to support an e-mail system is shown in Figure 1 
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wherein a processor133 is shown, having an Input/Output ('I/O") section 135. a central processing unit ( CPU ) 137. 
and a mertK>ry section 139. The I/O section 135 is connected to a keyboard 141; a disk storage unit 143. a network 
inierface 145 to provide access to a network 117. a display unit 147. a pointing device 148 and a CD-ROM drive unit 
149 The CD-ROM unit 149 can read a CD-ROM storage medium 151 that typically contains programs 153 and data 
5 The CD-ROM 1 49 and the disk storage unit 143 comprise a filestorage mechanism. One skilled in the art will understand 
that the f ilestorape mechanism may comprise read only memory. RAM or other storage technology that allows a com- 
puter to access data. Such a computer system is capable of executing e-mail applications that embody the invention. 
Figure 2 provides a conceptual overview of the elements of an electronic mail system. An onginator's e-mail system 

200 contains a composition facility 201 that allows the originator to compose an e-mail message including specifying 
ra a subiecl and a recipient's e-mail address. This e-mai! message is passed to the e-nrtail transmission facility 203 where 
It IS scni to the intended recipient's address. Often the message is sent to the recipient by using the Internet 205 as 
indicated by the arrow labeled as 213. if the intended recipient is on the same computer as the onginator the e-mail 
mossHQC generally does not cross the Internet 205. Optionally, a . copy of the message is stored in. the ongtnator's : 
lilosioraao 204 The recipient's e-mail system 202 contains a facility to receive e-mail 207 and to store the e-mail 
15 mcssngo in the recipient's inbox. E^ail messages arriving from the Internet 205 enter the e-rnaii receiver system 207 
as .ndicaicd by the arrow labeled as 211 . The inbox is generally maintained in a filestorage 208. The recipient reads 
and pf ocosscs e-mail messages in the recipient's inbox by using any ot a number of application programs that comprise 
the recipient's e-mail processing system 209. 



zo Operational Overview 

Figure 3 illustrates the operation of the invention. An originator sends a putative junk e-mail message 301 that is 
delivered to many recipients as indicated by ttie arrows labeled as 313. 315. 317. and 319. Some ot these recipients 
are members of n trusted group seived by a Trusted Group Sen/er 311. In this example, the putative junk e-mail 
25 mcGSiigc 301 is received by Trusted Group Members A. B and 'n' 303, 305. 309 and possibly by some, but not nec- 
essarily all other Trusted Group Members 307. Further, assume that Trusted Group Members A and B 303. 305 receive 
the putative |unk o-mail message 301 before Trusted Group Member "n- 309 receives the putative junk e-mait message. 
Trusted Group Members A and B 303. 305 both use their respective e-mail systems to present the putative junk ennail 
message 301 lor each to view and separately classify the putative junk message 301 as being junk e-mail. This clas- 
30 silication results .n an e-mail message, containing an X-Junk-Mail-Report: header, being sent to the Tmsted Group 
Server 311 as indicated by the dashed arrows labeled as 321 and 327. for each trusted user who so classifies the 
putative junk c-ma.l l( the Trusted Group Server 311 receives a sufficient number of Junk Mail Report messages 
Identifying the putative junk message 301 the Trusted Group Server 311 will distribute an e-mail message containing 
an X-Junk-Ma.l-Waming: headertothe Trusted Group Members 303. 305, 307. 309 as indicated by the arrows labeled 
35 as 323 325 329 and 331 Upon receipt of the Junk Mail Warning message, the e-mail system for each Trusted Group 
Member removes the putative junk message 301 if it has been received but not yet read by the intended recipient. 
Further if the putative junk message 301 has not been received, the invention conditions the intended recipient's e- 
mail system to discard the putative junk message 301 if it does arrive. Thus, if a sufficient number of trusted users 
determine that the putative junk message 301 should be classified as junk e-mail the other Trusted Group Members 
40 will not be annoyed by the putative junk message 301 because it will be automatically deleted from their e-mail systems. 

Figure 4a illustrates an example display presented to an e-mail recipient when using a typical e-mail system to 
examine messages stored in an inbox. The emiail system presents the window 401 on the display device. The window 
401 has a title bar 405 that includes a close box selectable control area 407. The recipient can manipulate a pointing 
device to move the cursor's active area over the close box 407 and activate the pointing device (typically by clicking 
45 a button on the pointing device). This activation sends a command to the application controlling the window 401 to 
cause the application to ctose the window 401 and possibly temninate execution of the application. The window 401 
includes a scrolling pane 403 that contains information about the e-mail messages in the recipients inbox. The message 
labeled as 409 is'curienlly selected. The content of this e-nnail message is displayed in Figure 4b. . 

Figure 4b illustiates a window 421 displayed by an e-mail viewing program. A pane 429 within the window 421 
so contains the text 431 of the selected message 409. The pane 429 includes a scroll control selectable control area 423 
that allows the recipient to scroll the message text 431 if the pane 429 is too small to display the message text 431 in 
its entirety The recipient activates the 'Delete Message" selectable control area 427 to cause the e-mail system to 
dclcto the displayed message. Clearly this particular message 409 will often be considered junk e-mail. The -Delete 
as Junk Mail" selectable control area 425 allows the recipient to both delete the message 409 and to inform the trusted 
55 groups to which the recipient belongs that the recipient considered the message 409 to be junk e-mail. 
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Database information 

A prcl erred embodirrient of the invention maintains Information regarding Trusted Group Sen/ers, Trusted Group 
Members pulalive junk e-mail and junk ennall. 

s Figure 5 illustrates the databases maintained in the trusted user's client computer and in the. trusted group's server 

computer folaiing to trusted groups/ The e-mail system on the user's computer maintains the User's Trusted Group 
dHiabHSC The user may belong to a number of trusted groups. The Trusted Group Server Name" field 501 of the 
record 500 rs associated (either contains, or refers directly or indirectly) with a text siring that represents the name of 
one ol those trusted groups; The "E-mail Address of Trusted Group Server" field 503 is associated with a text string 

'0 ih^i IS Hn e-mail address of, an application program recipient that effectuates the functionality of the Tmsted GroujD 
Server The Trusted Group Server Public Key' field 505 is associated with the public encryption key provided for the 
server By using prior art methods, as described below, the Trusted Group Server's public key, when used with the 
user's p jbK key allows the Trusted Group Server to authenticate that a message it received was sent from a trusted 
user ot the group. 

J5 The Trusted Group Server maintains the Sender's Tmsted Group databasi^. Each record 510 in this database 

compf rios ri *t -mail Address, of a Trusted Group Member" field 511 , and a "Trusted Group Member Public Key" field 
513 I ho 'b mnil Address of a Trusted Group Member" field 511 is associated with a text string that is the e-mail 
Hddf CSS oi the Trusted Group Member. The Trusted Group Mennber Public Key" field 51 3 contains the public encty^^ 
key pfov'iood tor the user. 

20 Figure 6 iJiusi rales the databases maintained in the trusted user's client computer and in the trusted group's server 

cofnpuici ivti'»iij to |unk e-mail. The e-mail facilities for each trusted user mairitain a database of information about 
|unk c rrwiit E-tch rccord 600 In the User's Junk E-mail database contains a "Junk E-mail Characteristics" field 601 
and fi Irtit Drtic" tickJ 603. The contents of the "Junk E-mail Characteristics" field 601 is associated with a set of text 
strmgo The .ittrtbuics of the set of text strings associated with this field 601 are described below. The "L^st Date" field 

2S 603 cont. ino d. it.i thiit rcprosonts the calendar date when the record 600 was last used or updated, 

Tho Tf jstcxJ Group Server also maintains a database of information relating to putative and junk e-mail. Each 
record 610 ri the Scn/er's Junk E-mail database has a "Junk E-mail Characteristics" field 611 , having attributes similar 
to those of the corresponding field 601 in the User's Junk E-mail database. These attributes are described bebw. The 
record 610 n\^o includes the 'Number of Trusted Group Reporting" field 613 that maintains a count of the number of 

30 Trusted Gf oAjp. Members who have classified the putative junk e-mail message associated with the "Junk E-mail Char- 
acteristics" trcW 611 as being junk e-mail. Finally, the "Date of Last Report" field 615 contains data that represents the 
calondH' dnio ol the last report received. Once the value of the "Number of Trusted Group Reporting" field reaches or 
exceeds a spec died value the putative junk e-mail is considered to be junk e-matl. 

3S Database Maintenance 

Figures .7 nnd 8 illustrate periodic maintenance processes applied to the Junk e-maii databases. These mainte- 
nance processes removes records, that have not been used for a period of time, from the databases thus controlling 
the size ol !•^c databases. These processes are invoked periodically during a period of low computer activity. A preferred 
^0 embodiment invokes these processes every day at 2:10 a.m. 

The process illustrated in Figure 7 is used to maintain to the User's Junk E-mail database. The process starts at 
the termin^il Ubcled as 701. Then 703 each record 600 in the database is examined 707 to determine whether the 
record 600 hrts been updated within a given trip time. In a preferred embodiment, the trip time is set to seven days. 
. This delorminHtion is based on the current date and the date within the "Last Date" field 603 of the record 600 being 
^5 examined It the record 600 has been inactive for longer than the trip time, the record 600 is deleted 705. This loop 
continues for nil the records 600 in this database and once the last record is examined the process completes through 
. the terminal iHbeled as 709. 

The process illustrated in Figure 8 is very similar to the one illustrated in Figure 7. However, this process mairilains 
the Server'b Junk E-mail database. The process starts at the terminal labeled as 801. Then 803 each record 610 in 
50 the database is examined 807 to detemnine whether the record 610 has been updated within some trip time. In a 
. preferred embodiment, the trip time is set to seven days. This determination is based on the current. date and the date 
within the "Dale of l-ast Report" field 615 of the record 610 being examined. If the record 610 has been inactive for 
longer than the trip time, the record 610 "is deleted 805. This loop continues for all the records 610 in this database 
and once the last record is examined the process exits through the termirtal labeled as 809. 
£5 One skilled in the art wilt understand that the trip time value may be specified to best effectuate the goals of the 

inventbh. These goals are satisfied when the trip time is set long enough to ensure that delayed junk e-mail messages 
are captured and discarded. 
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Junk E-mail Characteristics 

As mentioned above, the junk e-mail database records 600, 610 contain a field 601 , 611 associated with a set of 
text strings having attributes that characterize a junk e-mall. message. Each set of text strings contains four strings: 
5 the first string of the set contains the.text string contained in the field-body of the Message-ID: header contained in the 
junk e-mail - it the junk e-mail did not have a Message-ID: header this string is set to the empty string. The second 
string of the set contains the text string that identifies the originator of the junk e-mail message. This string is extracted 
from' the field-body of the Sender header if that header is included in the junk e-nrai! - if the junk e-mail does not have 
the Sender: header, the field-body of the From header is used. If neither the Sender nor the From: headers are included 
10 in the message the second string is also set to the empty string. The third string contains the text of the field-body of 
the Subject: header or the empty string if no Subject: header was included in the message. Finally, the fourth string 
contains the concatenation of the first 5 lines of the body text of the message followed by an encrypted digital signature 
constructed using the user's private key as described be tow. ; 

Figure 9 illustrates the process used to compare two sets of identifying characteristics or a set of characteristics 
15 . and an e-mail message. If the comparison is between a set of characteristics and an e-mail message, the process first 
determines the characteristics of the e-mail message and then performs the same comparisons as between two sets 
of identifying characteristics. The comparison process for two sets of identifying characteristics starts at the terminal 
labeled as 901 . The first test 903 is whether the Message-ID: strings of both sets of characteristics are the same and 
not blank. If this condition is true there is a match and the process completes through the terminal labeled as 911. If 
20 this condition is false, the second test 905 is whether both Message-ID: fields are empty; the originator and subject 
data are the same and 80% or more of the words in the first five strings of the body text of each message (these strings 
are included in the identifying characteristic sets) are the same. Finally, if the characteristics do not match the process 
tenninates through the terminal labeled as 907. Table 1 is a pseudo-code representation of the process illustrated in 
Figure 9. One skilled in the art will understand that this pseudocode is not compilable program code but a textual 
25 representation of actual compilable code used to cleariy demonstrate the operation of the process illustrated in Figure 
9. The pseudo-code shown in Table 1 is self-documenting to one skilled in the art so long as it is understood that the 
compareSlines function returns an integer representing the percentage of kientical words within the text lines of the 
two sets of identifying characteristics. 



30 



nessagelDA, .-nessagelDB; 



boolean ma::ch = 



FALSE; 



35 



40 



45 



it ( {messagelDA not empcy) and (message IDB no c empcy) ) ( 

if (messagelDA equal messagelDB) {match = TRUE) ; 
) elseif {{messagelDA empty) and (messagelDB empty)) ( 
if ( (messagelDA. sender equal messagelDB . sender ) 

and (messagelDA. subject equal messagelDB. sub j ecC ) ) { 
if (80 lessthanorequal 

compareSlines (messagelDA. text,. messagelDB. text) ) 



(match = TRUE) ; 



) 



so 



Table 1 



55 



Having described the databases, their maintenance processes and the process used tor comparing e-mail iden- 
tifying characteristics, we now discuss additional aspects of the invention within the receiving e-mail systems. 
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Classifying E-mall as Junk E-Mail 

Figure 10 illustrates the process a trusted user invokes upon designating an e-mail message to be junk e-nnalL 
As described above in the discussion of Figure 4b. once a trusted user views a given message that user has a number 
of options to dispose of the displayed message. These options include the option to "delete" 427 the displayed niessage 
or "delete as junk mail" 425 the displayed message. When the recipient selects the "delete as junk mail" option 425 
the process illustrated in Figure 10 is invoked. The process starts at the terminal labeled as 1051. The process then 
1053 creates a new record 600 in the recipient's version of the User's Junk E-mail database. To create this record 600, 
the process first examines the displayed e-mail message to extract a set of identifying characteristics for that message. 
This set of characteristics is stored in the 'Junk E-mail Characteristics' field 601 of the record 600. Additionally, the 
current date is placed in the "Last Date" field 603. Next 1055, the process constructs a Junk-I^ail Report message 
addressed to each Trusted Group Server in the User's Trusted Group database. This message is an e-mail message 
that includes an X-Junk-Mail-Report: header. The field-body of this header includes the identifying characteristics of 
the message being reported. Thus, if the displayed message contained the information shown in Table 2: 



Dace: Thu, 2 May 1996 12:23:40 -0400 
Message-Id^ <199605021528 . M3A22574aaccctmgr> 
To: jdoe@sun.com 
From: sdilly@sun.com 
Subject: The Eleccfic Library 

line one 
line two 
line three' 



30 Table 2 

the junk mail report message would contain infornnation similar to that shown in Table 3: 
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Dace: Mon,. 20. May 1996 13:49:31 -0700 

Message-Id: <199605202049 ,NAA01356@swpcc . Corp . Sun .COM> 
To: crustedG sun. coir/, 
rrom: jdoe^sun . com 

X-Junk-Mail-Reporc: <19960520162a .MaA22o74@accct:mgr> 
<sdilly@sun.com>.<The Electric Library> <iine one line cwo 

line chree> < — ---BEGIN . SIGNITUKE BLOCK . . 

Version: 2.6.2 

n:QCNAzE31N8AAAEEANkdxq741DkG j j bHbYKsuiK8u6CplcxvOhgHnaF8bWOgb 

/zk2Ru9rT2z3zRS3za++OLT/iruRqtI5r7Xied4QnlJ8?KypApEuvSg)cb2jyi8 

C^^QW6WsQ72MfPZneP6/4LoccV6jaPtsKXEGiiuvgzUzKoDSBCjvhVurkCy8R4w 

R YGJ cAAUTCCFCaWxs IEhlcnNoZXkgPCBiaWxsckBnZXRuZXQuy2 9 1 ID6 JAJUD 

SPJOc^^dy f cmUQ3 i 8LBRUBAbg2A/ 4 owGmQf cy3 QQd/MMRpqiTqkLvw^ 

uvnQ7/DpWrnA727dEWOJ0kb2V+lq2p02/Yr4PdqBcxmU0/D+YfEZYi6eX2fnze 

^•/77lKgT2Rfsoq/78kknZi33uPCDx3+u8o2TaRfW64lmBP0mUM2CT0Zh2u0YW 

gi9?>-^R0ywSGFA===Kzcq 

--END SIGNITURE BLOCK > 



Tables 

30 f ach tiold in the header-body of the X-Junk-Mail-Report: header is delimited by a and pair with a convention 

that i{ the cnrtfrtcior is included in the delimited data it is replaced by "»" to indicate that the ">" is part of the data 
and not H cclim Iter. 

Addiionnliy authentication information in the form of a digital signature (a large binary number encoded into ASCII 
text ustra methods well understood in the art) is.added to this message as described below This, message is sent to 

3S each Trusted Group Server existing in the User's Trusted Group database by retrieving database records 500 and for 
each record 500 constructing the authentication information using the information in the "Trusted Group Server Public 
Key* ficW 505 Hnd sending the message to the €-mail address associated with the "E-mail Address of Trusted Group 
Server" tied 503 Thus, each Tmsted Group Server is notified that the recipient has classified the e-mail as junk e- 
mail. Finnlty 1057. the displayed message is deleted from the user's mail system and the process completes through 

40 the term inal labeled as 1059. 

As will bo described below, the creation of a record 600 in the User's Junk E-mail database means that additbnal 
copies o( the message that the recipient has classified as junk e-mail will be discarded when they are received. One 
skilled in the art will understand that the invention need not create this record 600 at this time because the Trusted 
Group Server may eventually send a Junk Mail Warning message to the recipient's mail system that will create the 

45 record 600 and cause subsequent messages to be discarded. In this circunnstance, the recipient's classification of the 
. displayed message a junk e-mail is simply an advisory to the Trusted Group Server Further, one skilled in the art will 
understano that the detailed structure of the example above does not limit the invention and that the invention can 
operate with rikiny different message formats. 

so Trusted Group Server 

The Trusted Group Server rieceives junk mail report messages from trusted users and accumulates these mes- 
sages until It receives some number of junk mail report messages relating to a particular putative junk mail message. 
After receiving a sufficient number ot junk mail report messages relating to the particular, putative junk mail message 
Bs the Trusted Group Server sends a junk mail warning message to one or more trusted group members. This junk mail 
warning message conditions the trusted user's e-nnail system to dispose of the putative junk mail message before it is 
viewed by the trusted user. 

Figure 11a illustrates the process used by the Trusted Group Server when it receives an e-nnail message. The 
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process starts at the terminal labeled as 1101 . The server receives 1103 an e-mail message and examines the received 
message to determine 11 05 whether the received message is a Junk Mail Report message as indicated by the presence 
of the X-Junk-Mail-Report: header in the received message. At this time, a copy of the received message is placed in 
a log file to provide a history of received messages lor security purposes. If the log file becomes too large the message 

5 is not stored, instead a copy of the message is fon/varded to the group manager along with a warning message stating 
that the log file has overflowed. If 1105 the received message is not a Junk Mail Report message, the process forwards 
1107 the received message to e-nnail address of the group manager, deletes 1117 the received message from the 
server systehi (leaving the copy in the log file) and completes through the terminal labeled as 1 1 09. The group manager 
is responsible for the maintenance of the Trusted Group Server and will process or dispose of the fonwarded received 

'0 message as appropriate. 

If 11 05 the received message is a Junk Mail Report message, the process then checks 1111 whether the originator 
of the received nriessage is a member of the trusted group by comparing the field-body text of the Sender: header field 
with the records 510 in the Server's Trusted Group database to determine whether the originator's e-mait address is 
contained in the "E-mail Address of Trusted Group Member" field 511 of one of the records 510 in the database - if the 

'5 fccci\/ed message does not include a Sender field, the information in the field-body of the From: header is used. If no 
record 510 exists. matching the originator's e-mail address, the received message is discarded 1117 and the process 
compotes through the term inallabeled as 1109. 

1? 1111 the originator of the received message is a member of the trusted group, the next step 1113 determines 
whcihcr the received message is authentic. This check occurs by decrypting the digital signature contained in the 

.■c' rucoivod message characteristic set usirig methods well understood in the art. If the digital signature cannot be au- 
ihcttiicrfted. the received message is discarded 1117 and the process competes through the terminal labeled as 1109. 

r 1113lhemessageisauthentic, the process continues through the terminal labeled as 11 15 to theterminal labeled 
a% 1 131 of Figure 11b. Next 1133, the process extracts the identifying characteristics of the reported junk e-mail mes- 
&.igc iifxJ cetermines 1135 whether the Server's Junk E-mail database contains a record 610 with matching charac- 

-5 tcnctcs in the 'Junk E-mail Characteristics" field 611 . At this pojnt, the received message is deleted after retaining any 
, noodod tnlornoation. If 1135 such a record 610 exists, the value in the "Number of Trusted Group Reporting" field 613 
IS irKrooontod 1137 and the current date is stored in the "Date of Last Report" field 615. Storing the current date in 
tho record 610 resets this record's trip time as used in the process described for Figure 8. The process continues to 
iho rif>cision block labeled as 1141 and described below, if 1135 no record 610 matches the report's characteristics, 

^ ihf» process creates 1139 a new record 610 in the Sen/er's Junk E-mail database storing the characteristics of the 
message in the "Junk E-nriail Characteristics" field 611, setting the "Number of Trusted Group Reporting" field 613 to 
a value of '1 " and setting the "Date of Last Report" field 61 5 to the curent date. Next 1 1 41 . the process checks whether 
the vdluc contained in the "Number of Trusted Group Reporting" field 613 is greater than a preference value - if "Number 
of Trusted Group Reporting" fietei 613 is not greater than the preference value, the process completes through the . 

35, icrmmal labeled as 1145. 

If the value in the "Number of Trusted Group Rejporting" field 613 is greater than the preference value, the process 
constructs 1 143 and sends a Junk Mail Warning message to the members of the trusted group and the process com- 
pletes through the terminal labeled as 1145. One skilled in the art will understand that the process described above 
contemplates sending junk e-mail warning messages to selected members of the trusted group. . 

•to The junk e-mail warning message contains an X-Junk-Mail-Warning: header with a field-body containing the e- 
; mail message characteristics and digital signature of the Trusted Group Server in a format similar to the one described 
above, for the Junk Mai! Report message. 

Trusted User's Mail System 

45 . ■ \ 

Figure 1 2a illustrates the process used by a trusted user's e-mail system utilizing a preferred embodiment of the 
invention. The process starts at the terminal labeled as 1201. Once the trusted user's e-rriail system receives 1203 a 
new e-mail rnessage, the e-mail system determines 1205 whether the message is a Junk Mail Warning message by 
examining the message for a X-Junk-Mail-Waming: header. If 1205 the new e-mail message is a Junk Mail Warning 
50 message, it is checked 1207 to determine whether the originator of the message is a Trusted Group Server. This 
determiriatbn is accomplished by examining the User's Trusted Group database for a record 500 that contains the 
same e-mail address in the "E-rTTaii Address of Trusted Group Server" field 503 as the e-mail address of the new 
message's originator. . 

If 1207 the new message is not from a Trusted Group Server the new rnessage is discarded 1211 and the process 
55 completes through the terminal labeled as 1213. If 1207 the new message is from a trusted server, the digital signature 
is authenticated as described below. If 1209 the digital signature is not authentic the new message is discarded 1211 
and the process completes through the terminal labeled as 1213. If 1209 the new message is authentic the process 
continues through the terminal labeled as 121 5 to the terminal labeled as 1251 in Figure 12b. 
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However, if 1205 the new message is not a Junk Mail Warning message, the process then determines 1219 the 
message's characteristics. Once the new message's characteristics are obtained the process checks whether 1 221 a 
record 600 exists in the User's Junk E-mail database that matches the new message's characteristics - if 1221 no 
match exists, the process continues with normal e-mail processing through the terrninal labeled as 1 217 and inventive 

5 aspects of the process complete! 

However. i1 1221 the characteristics of the new message do match the "Junk E-mail Characteristics". field 601 of 
a record 600, the new message has been determined to be a junk e-mail message and the new message iis deleted 
. 1 223 and is thus prevented from being presented to the recipient. Thus, the invention has intercepted and disposed 
of the junk e-mail. Finally, the matching record 600 Is updated 1225 by storing the current date in the "Last Date" field 

10 803 of the nriatchirig record 600 and the process completes through the terminal labeled as 1213. 

Figure 12b illustrates the process that continues from the terminal labeled as 1215 in Figure 12a. Processing 
continues from the terminal labeled as.1251. At this point, the process has received a Junk Mail Warning message, ; 
has verified that this message originated from a Trusted Group Server and has authenticated the digital signature of 
the Trusted Group Server. Now, the process checks whether 1253 the User's Junk E-mail database already, contains 

75 a record 600 having the same characteristics as that included in the new Junk Mail Warning message - if 1253.such 
a record 600 exists, the current date is stored 1 255 in the "Ust Date" field 603 of the record 600. Thus, resetting this 
record's 600 trip time used in the process described in Figure 7. 

Finally, the new Junk Mail Warning message is discarded 1257 and the process completes through the terminal 
labeled as 1259. If 1253 no record 600 exists In the User's Junk E-mail database, the process creates 1261 such a 

20 record 600 and initializes its fields. The 'Junk E-mai! Characteristics" field 601 is initialized with the set of characteristics . 
provided in the field-body portion of the X^unk-Mail-Waming: header. The "Last Date" field 603 is initialized with the 
current date: Finally the inbox is scanned. This scan process examines each unfead e-mail message in the user's 
inbox. characterizes the unread e-mail message, and if the characterization matches that included in the new Junk 
Mail Warning message the unviewed message is deleted 1263 from the inbox so that it will not be presented to the 

2S recipient, the Junk Mail Warning message is discarded 1257, and the process completes through the terminal labeled 
as 1259. 

Authentication 

30 Authentication Is the process used by a recipient to be confident of the identity of the originator. The technology 

is well understood by those skilled in the art. First a message digest is created by passing the message through a hash 
function (such as MD4 or MD5). Then, this digest is encrypted using the senders private key resulting in a signature. 

This signature is a large binary number that is converted to an ASCII representation as shown in Table 3. The 
recipient first converts the ASCII representation back to a number and decrypts the message digest using the senders 
35 public key. Then the recipient creates another message digest of the originator's message and compares the newly 
created digest with the decrypted version. If the two digests are the same the message is authentic. . 

In the instant invention, the message header information (not including the signature block field of in the field-body 
of the X-Junk-Mail-Report: header) is used as the input to the hash function. 

40 Conciusion 

One skilled in the art will understand that the invention as described above teaches a computerized e-mail system 
that prbvides a group of like trusted minded recipients to collectively detemnine which e-mail messages are junk e-mail 
for that group. Further, the invention removes these junk e-mail messages and thus removes that burden from most 
45 of the group. 

Further, one skilled in the art will understand that various modifications and alterations may be made in the preferred 
embodiment disclosed herein without depiariing from the scope of the invention. Accordingly the scope of the invention 
is not to be limiled to the particular invention embodiments discussed above, but should be defined only by the claims 
set forth below and equivalents thereof. 

so The processes described above may be performed by a computer program running on a computer in the embod- 

iment described. Such a computer program can be recorded on a recording medium (for example a magnetic disc or 
tape, an optical disc or an electronic memory device, such as a ROM) In a way well known to those skilled in the art. 
When the recording medium is read by a suitable reading device, such as a magnetic or optical disc drive, a signal is 
produced which causes a computer to perform the processes described; 

ss The processes may also be performed by electronic means. 
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Claims 

I. A computer controlled method lor processing electronic mail (e-mail) comprising the steps of: 

5 (a) presenting an e-mail message to a first trusted recipient said first trusted recipient being one of a plurality 

of trusted recipierits; 

(b) classifying said e-mail message as junk e-mail; and 

(c) proventinig presentation of said e-mail message to one or more of said plurality of trusted recipients; 

10 2. The computer controlled method of claim 1 whereby said plurality of trusted recipients are known to a trusted group 
scr\'cr and said computer controlled method of claim 1 further comprising: 

(b1 ) notifying said trusted group server that said first trusted recipient has classified said e-mail messajge as 
|unk c-rnail. 

75 3. The computer controlled method of claim 2 whereby step (bl) further comprises sending a junk mail report message 
to SH id trusted group server. . 

4. The computer controlled method of claim 1 whereby step (c) further comprises: 

(c3) sending a junk mail warning message to said plurality of trusted recipients. 
20 - . ' " 

5. The computci tnothod of claim 4 whereby step (c) further comprises: 

(ci) receiving a junk noail report message; and 
(c2 Mn It latin 9 sicp c3 after receiving sakj junk mail report message. 
25 ■ ' '■■ ■ ; . . . ■ ■ . 

6. The computer control led method of claim 1 whereby step (c) further comprises: 

(cU receiving a junk mail warning rhessage. 

7. The comptiinr controlled method of claim 6 wherein said junk mail warning message includes an identifying char- 
30 acteristic and whereby step (c) further comprises: 

(c4) dcicting an unpresented e-maii message having said identifying characteristic, 

8. The computer controlled method of claim 7 whereby step (c) further comprises: 

35 (c2) storng sad identifying characteristic; and , 

(c3) receiving said unpresented e-mail message. 

9. An electronic nrviil (e-mail) systenrt having a central processing unit (CPU), a memory, and a filestorage mechanism; 
said system compnsing: 

40 

a presentation mechanism configured to present an e-mail message to a first trusted recipient; said first trusted 
recipient being one of a plurality of trusted recipients; 

a classitication mechanism configured to allow said first trusted recipient to classify said e-mail message: and 
a presentation prevention mechanism configured to prevent presentation of said e-mail message to one or 
45 more ol said plurality of trusted recipients. 

10. The electronic rriaii system of claim 9 whereby said plurality of trusted recipients are known to a trusted group 
server and wtieieby the eleclronic mail system of claim 9 further comprises: 

a notification mechanism configured to notify said trusted group server that said first trusted recipient has 
so classified said e-mail message as junk e-mail. 

II, The electronc mail system of claim 10 whereby said notification mechanism is further configured to send a junk 
mail report message to said trusted group server 

55 12. The electronic mail system of claim 11 or the method of claim 3 whereby said junk mail report message includes 
an x-junk-mail-report header. 

13. The electronic mail system of claim 11 or the method of claim 3 whereby said junk mail report message includes 
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an identifying characteristic of said e-mail messaga. 

1 4. The electronic mail system of claim 9 whereby said presentation prevention mechanism further comprises a warn- 
ing mechanism configured to send a junl< mail warning message to one or more of said plurality of trusted recipients. 

•5 . ■ • ' - . . • . • , . ■ . . , 

15. The electronic mail, system of claim 14, whereby said presentation prevention mechanism further comprises: 

a reception mechanism configured to receive a junk mail report message; and an initiation mechanism con- 
figured.to initiate said warning mechanism after receiving said junk mail report message. . ^ 

TO 16. The electronic mail system of claim 14 or the method of claim 4 whereby said junk mail warning . 
an x-junk-mail-waming header. 

17. The electronic mail system of claim 9 whereby said presentation preveniion mechanism further comprises a first 
reception mechanism configured to receive a junk mail warning message. 

.. 18. The electronic mail system of claim 17 wherein said junk mail warning message includes an identifying character- 
istic and whereby said presentation prevention mechanism further comprises a deletion mechanism configured to. 
dispose of an unpresented e-mail message having said identifying characteristic. 

A-* 19. The electronic mail system of claim 18 whereby said presentation prevention mechanism further comprises: 

a storage mechanism configured to store said identifying characteristic; and 

a second reception mechanism configured to receive said unpresented e-mail message. 

20. An electronic mail (o-mait) apparatus configured to process electronic mail messages; said apparatus having a 
coniral processing unit (CPU), a memory, and a filestorage mechanism; said apparatus comprising: 

a presentation prevention mechanism configured to prevent presentatbn of an e-mail message to one or 
noro of a plurality of trusted recipients. 

JO 21. A signal for causing an electronic mail (e-nnail) apparatus to process electronic mail messages; said apparatus 
having a central processing unit (CPU), a memory, and a filestorage mechanism; the signal causing the apparatus 
to implement: 

a presentation preveniion mechanism configured to prevent presentation of an e-mail message to one or 
more of a plurality of trusted recipients. 

55 , : ■ 

22. A method of storing data as a recording medium, the method comprising storing data representative of a signal, 
which signal causes an electronic mail (e-nnail) apparatus to process electronic mail messages; said apparatus 
having a central processing unit (CPU), a memory, and a filestorage mechanism; the signal causing the apparatus 
to implement 

40 a presentation prevention mechanism configured to prevent presentation of an eHTiail message to one or 

more of a plurality of trusted recipients. 

23. The electronic mail apparatus of claim 20. the signal of claim 21 orthe method of claim 22 whereby said presentation 
preveniion mechanism further corpprises a junk mail warning message reception mechanism configured to receive 

45 a junk mail waming message. 

24. The electronic mail apparatus, signal or method of claim 23 whereby said junk nr^ll warning nnessage includes an 
idenlilying characteristic and said presentation prevention mechanism further comprises a junk mail deletion mech- 
anism configured to dispose of said e-mail message having said identifying characteristic. 

so 

25. The electronic mail apparatus, signal or method of claim 24 whereby said junk mail deletion mechanism further 
comprises a junk mail intercept mechanism configured to dispose of said e-mail message prior to said e-naail 
message being stored in an 'inbox. 

55 2S. The electronic mail apparatus, signal or method of claim 24 whereby said junk mail deletion mechanism further 
comprises a junk mail removal mechanism configured to scan an inbox to dispose of said e-mail message. 

27. The electronic mail apparatus of claim 20, the signal of claim 21 , or the method of claim 22 whereby said presen- 
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tatton prevention mechanism further comprises a junk* mail reporting mechanism configured to send a junk mai! 
report message to a trusted group server 

28. A trusted group sender apparatus configured to process electronic mail messages; said apparatus having a central 
processing unit (CPU), a menriory, and a filestorage mechanism; said apparatus comprising: 

a notification reception mechanism configured to receive a junk mail report message; and 
a warning mechanism configured to send a junk mail warning message to a trusted group recipient served by 
said trusted group sen/er apparatus, . 

29. A signal for causing a trusted group server apparatus to process electronic mail messages; said apparatus having 
. a central processing unit (CPU), a memory, and a filestorage mechanism; the signal causing the apparatus to 

implement: 

>5 a notification reception mechanism configured to receive a junk nnail report message; and 

a warning mechanism configured to send a junk mail warning message to a trusted group recipient served by 
said trusted group server apparatus. . 

30. A method of storing data as a recording medium, the method comprising storing date representative of a signal, 
20 which signal causes a trusted group server ajDparatus to process electronic mail messages; said apparatus having 

a central processing unit (CPU), a memory, and a filestorage mechanism; the signal causing the apparatus to 
implement: 

a notification reception mechanism configured to receive a junk mail report message; and 
25 a warning mechanism configured to send a junk mail warning message to a trusted group recipient served by 

said trusted group server apparatus. 

31; The trusted server apparatus of claim 28, the signal of claim 29 or the method of claim 30 further comprising an 
initiation mechanism configured to initiate said warning mechanism after receipt of said junk mail report message. 
30 . 

32. A computer program product comprising: 

(a) a computer usable storage medium having computer readable code embodied therein for causing a com- 
puter to process electronic mail messages; said computer readable code comprising: 
35 (b), computer readable code. devices configured to cause said computer to effect a presentation prevention 

mechanism configured to prevent presentation of an e-mail message to one or more of a plurality of trusted 
recipients. 

33. The computer program product of claim 32, whereby said presentation prevention mechanism further comprises 
40 computer readable code devices configured to cause said computer to effect a junk mail warning nriessage recep- 
tion mechanism configured to receive a junk mail warning message. 

34. The computer program of claim 33 whereby said junk mail warning message includes an identifying characteristic 
and said presentation prevention mechanism further comprises computer readable code devices configured to 

45 cause said computer to effect a junk mail deletion mechanism configured to dispose of said e-mail message having 
said identifying characteristic, 

35; The computer program product of claim 34 whereby said junk mail deletion mechanism further comprises computer 
readable code devices configured to cause said computer to effect a junk mail intercept mechanism configured to 
50 . dispose of said e-mail message prior to said e-nnail message being stored in an inbox. 

36. The computer program product of claim 34 whereby said junk mai! deletion mechanism further comprises computer 
readable code devices configured to cause said computer to effect a junk mail removal mechanism configured to 
scan an inbox to dispose of said e-mail message. 



55 



37. The computer program product of claim 32 whereby said presentatbn prevention mechanism further comprises 
computer readable code devices configured to cause said computer to effect a junk mail reporting mechanism 
configured to send a junk mail report message to a trusted group server 
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. 38. A computer program product comprising: 

(a) a computer usable storage medium having computer readable code embodied therein for causing a com- 
puter to provide services to a trusted recipient said computer readable code comprising: 
■ s . (b) computer readable code devices configured to cause said computer to effect a notification reception mech- 

Hmsm configured to receive a junk mail report message; and 

computer readable code devices configured to cause said computer to effect a warning mechanism configured 
to said a junk mail warning message to a trusted group recipient served by said computer. 

10 39. The computer program product of claim 38 further comprising computer readable code devices configured to cause 
SHid computer to effect an initiation mechanism configured to initiate said warning mechanism after receipt of said 
junk mail report message. 

40. A Signal according to claim 21 , any one of claims 23 to 27, claim 29 or claim 31. wherein the signal is recorded to 
a focofding medium. 

41. A signal according to claim 40, wherein the recording medium comprises a magnetic disc, a magnetic tape. an. 
opt teal disc or an electronic memory device. 
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